avtoolz logo

Privacy Policy

Last updated: June 17, 2026

At avtoolz ("we," "our," or "us"), privacy is at the core of our architecture. This Privacy Policy describes how we collect, use, and protect your information when you visit avtoolz.com and use our suite of PDF and image processing tools (the "Service").

1. Privacy by Design: Client-Side Processing

avtoolz operates on a privacy-first, client-side model.

  • Local Execution: All file conversion, compression, merging, splitting, and editing operations are performed directly in your web browser using WebAssembly (WASM) and Rust.
  • No File Uploads: Your files are processed in your browser memory and are never uploaded to, stored on, or transmitted to our servers. We do not have access to, copy, or read your documents.

2. Information We Collect

We only collect the minimum amount of information necessary to provide and secure our Service:

A. Information You Provide Voluntarily

  • Account Data: If you create an account to save settings or preferences, we collect your email address. Authentication is handled via Google OAuth, and sessions are managed with encrypted cookies on our own backend.
  • Support & Communications: If you contact us for support, we collect your email address and any information you choose to provide in your message to help resolve your inquiry.

B. Information Collected Automatically

  • Technical Logs: Like most web services, our hosting and backend servers automatically collect basic network request logs. This includes your IP address, browser type, operating system, and request timestamps. We use this data solely for security auditing, DDoS protection, and server health monitoring.
  • Analytics: We may collect aggregated, non-identifiable usage statistics (e.g., button clicks or tool utilization rates) to understand how to improve our interface. We do not track individual user files, contents, or metadata.

3. Legal Basis for Processing (GDPR Compliance)

If you reside in the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the context:

  • Performance of a Contract: To create your account and maintain your user preferences.
  • Legitimate Interests: To monitor and protect the security of our Service (via server log analysis).
  • Consent: When you opt-in to optional cookies or custom communications.

4. Data Sharing and Processors

We do not sell, rent, trade, or lease your personal data. We only share information with trusted third-party service providers (processors) necessary to run the Service:

  • Google OAuth: We use Google as an identity provider for sign-in. Google processes your authentication credentials under their own privacy policy. We only receive your email address and basic profile information.
  • Hosting Providers: Our static site and serverless functions are served via secure hosting networks. They process connection details solely to route network traffic to your browser.

5. Security of Your Data

We implement robust administrative, technical, and physical safeguards to protect your personal data:

  • HTTPS: All traffic to and from avtoolz is encrypted using Secure Sockets Layer (SSL)/Transport Layer Security (TLS).
  • Session Auth: User sessions are secured with encrypted, httpOnly cookies that cannot be accessed by client-side scripts.
  • Database Isolation: Profile preferences and authentication data are stored in isolated databases with strict Row-Level Security (RLS) policies.

6. Your Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction (such as the EEA, UK, or California), you have the following rights regarding your personal information:

  • Right to Access/Know: Request copy of the personal information we hold about you.
  • Right to Rectification: Correct any inaccurate or incomplete personal information.
  • Right to Erasure (Deletion): Request that we delete your account and personal data.
  • Right to Restrict or Object: Object to our processing of your data under certain circumstances.
  • Right to Data Portability: Request a copy of your personal data in a structured, readable format.

To exercise any of these rights, please contact us at legal@avtoolz.com or delete your account directly through your Profile Settings page.

7. International Data Transfers

Our service providers may store and process data in regions outside of your home country (including the United States). We ensure all data transfers comply with applicable legal frameworks, using Standard Contractual Clauses (SCCs) to maintain the security of your data.

8. Changes to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to check this page periodically for updates.